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ABSTRACT. 


The- current baseline method, and software implementation of the 
Space Shuttle -reaction control subsystem failure detection and identifi- 
cation (RCS FDI) system is presented. This algorithm is recommended 
for inclusion in the redundancy management (RM) module of the Space 
Shuttle Guidance, Navigation and Control System. Supporting software 
is presented, and recommended for inclusion in the system management 
(SM) and display and control (DSC) systems. 

RCS_FDI uses data from sensors in the jets, in the manifold iso- 
lation valves, -and' in the RCS fuel and oxidizer storage tanks. A list 
of jet failures and fuel imbalance warnings is generated for use by 
the jet selection algorithm of the on-orbit and entry flight control 
systems, and to inform the crew and ground controllers of RCS failure 
status. Manifold isolation valve close commands are generated in the 
event of failed on or leaking jets to -prevent loss of large quantities 
of RCS fuel. 



FOREWORD 


The system description is as complete and detailed as current 
development allows. 

Reference 1 presents rationales for the design, a description 
of hardware sensor devices, and descriptions of nominal operation of 
RCS FDI. 

Section 1 of this report describes the functional requirements 
of the method. It contains a statement of the objective of RCS FDI, 
a list of assumptions governing design of the algorithm, the input- 
output requirements, and a brief functional description of the software. 

Section 2 presents the software formulation of RCS FDI. First, 
a model executive for FDI is given, followed by the eight functional 
modules of RCS FDI. An assessment is made of core and timing require- 
ments . 

Section 3 contains a glossary of variable names in the software. 

Supporting data is included in the appendices. 
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SECTION 1 


SOFTWARE FUNCTIONAL REQUIREMENTS 


1.1 Overview 

The Flight Control {FC} module controls the attitude and trans- 
lation of the space shuttle orbiter during the on-orbit mission phase 
and early in the entry phase by utilizing as effectors the Reaction 
Control Subsystem (RCS) and/or thrust vector control of the Orbital 
Maneuvering System (OMS) . 

In a normal RCS jet firing, the following sequence and delays 
can be expected: 

(1) Turn on 

(a) Issuance of on command by Jet Select. 

(b) Transport to driver - TBD milliseconds. 

(c) Opening of solenoids - < 10 milliseconds. 

(d) Thrust buildup to steady state - v20 milliseconds. 

(e) Steady-state thrust. 

(2) Turn off 

(a) Issuance of off command by Jet Select. 

(b) Transport to RCS driver - TBD milliseconds. 

(c) Closure of .solenoid valves - < 10 milliseconds. 

(d) Thrust tailoff to zero - ^20 milliseconds. 

Several possibilites exist for anomalous behavior in either of 
these sequences leading up to failure. These include: 

(1) Communication failures. 

(2) Solenoid failures both opening,, closing. 

(3) Failure to achieve normal chamber pressure. 

(4) Leakage. 

t 

Based on these considerations, failure types are broken up into two 
groupings, on failures and off failures. Although several subgroupings 
of these by cause exist, there are but two major types of FDI response; 
one for all on failures and another for all off failures. 
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An on failure occurs any time a jet is producing thrust or 
consuming propellant when not commanded or leaking- Since, in the 
strictest sense, this would include normal thrust tailoff, an on 
failure condition must consistently exist for a minimum period of time 
longer than that of normal thrust tailoff. On failures, then, may 
include failure of solenoids to close in response to off commands, 
excessively long tailoffs, or leaks. The current algorithm identifies 
on failures within 3 seconds . 

Off failures are defined as a failure of an RCS thruster to 
develop thrust in response to an on command from the Jet Select. This 
could result from communication faults, accidental closure of isolation 
valves, jamming of either or both of the solenoids in the closed 
position, or a thruster structural failure. This current method 
detects off failures and identifies the failed jet in 120 milliseconds. 

Nominal chamber-pressure and chamber-temperature histories have 
been obtained for the RCS jets in vacuum conditions. Changes in these 
conditions due to atmospheric effects during entry have not yet been 
determined, so that some parameter modifications in the FDI algorithm 
may be necessary. 

The RCS FDI module will be contained primarily in the RM module, 
with interacting modules in the SM and D&C modules. Figure 1 shows 
the relationship of these modules to other GN&C major modules, and to 
sensors, effectors, controls, and displays. 

These modules are scheduled by the Moding, Sequencing, and Control 
(MSC) software via the Flight Computer Operating System {FCOS)'. 

RCS FDI is accomplished by two procedures in RI1, with monitoring 
of manifold isolation valve positions, fuel/oxidizer ratios in the RCS 
tanks, and RCS command and feedback data path failures performed by 
three modules within SM, and crew interaction handled with two modules 
in D&C. 

It is inaccurate, at this time, to refer to the RCS FDI executive 
as a module, as it is merely a conceptual model of the scheduling of 
the various RCS FDI modules. In fact, this scheduling will be 
accomplished by executives for the RM, SM, and D&C modules. Elowever, 
it is presented here, as design requirements of RCS FDI dictate certain 
constraints on these executives, which are embodied in the RCS FDI 
executive . 
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Figure 1. Relation of RM, SM f GN&C, and DC to other flight software and hardware 
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1.2 RCS FDI Executive 

The RCS FDI executive, as herein described, is a model for segments 
of the RM, SM, and D&C executives which will schedule RCS FDI. It is 
not intended that this be a specific software module, and it must be 
emphasized that it is presented for engineering purposes only. Actual 
implementation of software to schedule the various RCS FDI modules will 
be accomplished -as part of the design of the RM, SM, and D&C executives. 

In each minor cycle (and - major cycle, as major cycles will coin- 
cide with each 25th minor cycle) , the executive calls MONITOR_BTU_MASK, 
OFFAIL, and MANIFOLD_CHECK. OFFAIL is scheduled on a minor cycle 
basis because it is quite fast, and such scheduling enables the most rapid 
possible detection of off failed RCS jets. MANIFOLD_CHECK is scheduled 
each minor cycle to meet, the requirement that no RCS jet on a given 
manifold be fired 80 milliseconds after the closure of that manifold's 
isolation valves. Because of an uncertain lag in valve closure, and 
because the GPC has no other way of sensing manual manifold closure 
checks, MANIFOLD_CHECK cannot predict the closure times, and must 
therefore be executed each minor cycle. Running MONITOR BTU_MASK 
each minor cycle prevents the other procedures run each minor cycle 
from acting on erroneous data by disabling them within a minor cycle 
of detecting a communication failure. 

S TO RE_F D I _JT N I T_D AT A , OVERRIDEJJPDATE , ONFAIL, and FUEL_IMBALANCE 
are each run no more frequently than every major cycle to minimize 
computer burden. 

The tradeoff is that STOKE_FDI_INIT_DATA provides initialization 
data which may be as stale as one major cycle, manual interactions with 
RCS FDI will take one major cycle to be implemented, and on failures 
of RCS jets will exist for two major cycles before detection. It is 
held that the first two penalties are readily ignored, and that the 
cost of running ONFAIL each major cycle (rather than each minor cycle) 
will be an acceptably small loss of RCS propellant. 

Since the rate of depletion of the RCS propellant tanks is so 
small during normal RCS activity or leaks, FUEL_IMBALANCE can safely 
be run each major cycle, and it may be safe to execute it at a lower 
frequency if timing considerations so dictate. 
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In the presence of a communication fault, the FDI executive 
inhibits STORE_J?DI_INIT_DATA to maintain the initialization data 
stored on the last major cycle before the communication failure. The 
executive also inhibits 0VERRIDE_UPDATE except on those major cycles 
when the D&C SOP indicates a new override, inhibit, or enable command 
has been keyed in. The procedure RECHECK_ONFAILS is only scheduled 
when ONFAIL indicates a jet is newly on failed and requires checking. 

1.3 RCS FDI 

1.3.1 Objective 

The RCS FDI detects and identifies RCS failures and off-nominal 
performance, and takes appropriate action. This action consists of 
sending a list of failed jets to the RCS jet selection algorithm, 
closing manifold isolation valves where a leak is detected, and 
informing the crew and ground controllers of RCS performance. 

1.3.2 Assumptions 
The 
( 1 ) 


( 2 ) 

(3) 

The 

( 1 ) 

( 2 ) 

(3) 

It is further assumed that the sensors and actuators used by 
RCS FDI are completely reliable, pending further study. 

This software may be included in a later revision of this document. 


following assumptions are made about inputs to RCS FDI : 

Driver talkbacks, jet commands, chamber-pressure talk- 
backs, and manifold isolation valve commands and talkbacks 
will be packed discretes channelized as in Appendix A 
and available to FDI in the concatenated form shown in 
Appendix A . 

RCS leak detector talkbacks will be available in 16-bit 
fixed-point format as in Appendix B, and can be treated 
as bit strings, i.e., operated upon by logical AND. 

Inputs from D&C will be packed as described in Appendix A, 
and preceded by appropriate flags (Section 2.3.3). 

following assumptions are made about RCS FDI output: 

Jet fail lists will be produced in packed form, bit 
assignments jet by jet being as those for jet commands. 

Manifold isolation valve commands are packed as in 
Appendix A. 

Interfacing software will be developed to reformat RCS FDI* 
data for crew display and telemetry. 
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1.3*3 Input/Output Requirements 

Table 1 lists the interface requirements for RCS FDI . 

1. 3 . 3 . 1 Inputs 

Inputs to RCS FDI are: 

(1) Copies of packed RCS jet commands concatenated as in 
Reference 2 . 

(2) Packed chamber pressure discretes. 

(3) Packed driver talkback discretes. 

(4) Packed isolation manifold discretes. 

(5) Packed manual overrides, inhibits, enables. 

(6) RCS fuel and oxidizer tank quantities. 

1. 3. 3 . 2 Outputs 

Outputs of RCS FDI are: 

(1) Jet fail lists packed the same way as the input jet 
commands . 

(2) Manifold isolation valve automatic close commands. 

(3) Fuel imbalance warning flags. 

1.3.4 Functional Description 

The RCS FDI algorithm compares packed discretes representing 
jet commands, jet chamber pressures and jet driver talkbacks, and 
integers representing jet fuel injector and jet oxidizer injector 
temperature, to arrive at a list of failed jets. In the event of leaks, 
it can automatically close manifold isolation valves to prevent the 
loss of fuel and oxidizer. 

1.3. 4.1 MONITOR_BTU_MASK 

MONITOR__BTU_MASK checks eight discretes which indicate failure 
status of critical cards in the MDM used to control the RCS jets. 

When one of these discretes goes on, MONITOR_BTU_MASK inhibits the Jet 
Select from using the jets commanded via that data path, and issues 
a close command to the manifold controlled via that card. The state 
of RCS FDI at the last major cycle before the failure is kept for use 
in reinitializing FDI after the data path failure. When the flags are 
all down, reinitialization of RCS FDI using that data is commanded by 
MONITOR BTU MASK. 
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Table 1- RCS FDI interface requirements 


COMPUTER 

NAME 

SOURCE 

OR 

DESTINATION 

DESCRIPTION 

UNITS 

VALUE 

OR 

RANGE 

SAMPLE 
RATE (Hz) 

INPUTS 






JETCOMA 

JETCOMB 

JETCOMC 

JETCOMD 

JET_S ELECT 

RCS jet commands (packed) 


ON/OFF 

25 

MANUAL OVER- 


Request flags to reenable but 




RIDE A 

DSC 

inhibit further FDI on certain 

“ 

ON/OFF 

1 

MANUALJDVER- 


RCS jets (packed) 




RIDE B 






MANUAL OVER- 






RIDE C 






MANUAL OVER- 






RIDE_D 






INHIBIT A 

DSC 

Request flags to disable certain 

- 

ON/OFF 

1 

INHIBIT B 


RCS nets (packed) 




INHIBIT C 






INHIBIT_D 


- 




AUT OVER- 

DSC 

Request flags to reenable and 

- 

ON/OFF 

1 

RIDE A 


continue FDI on certain RCS jets 




AUT OVER- 


(packed) 


• 


RIDE B 






AUT OVER- 






RIDE C 






AUT OVER- 






RIDED 






CHANGE 

DSC ' 

Flag indicating new crew requests 

- 

ON/OFF 

1 - 

OVERRIDE 


to override, inhibit, or reenable 




STATUS 


certain jets 




IVOA, IVOB 

Hardware* 

Manifold isolation valve OPEN 

- 

ON/OFF 

25 

IVOC, IVOD 


talkbacks 




FLEAK 

Hardware* 

RCS fuel leak detector outputs 

°F 

TBD 

1 

OLEAK 

Hardware* 

RCS oxidizer leak detector outputs 

®F 

TBD 

1 

DRIVERA 

DRIVERB 

DRIVERC 

DRIVERD 

Hardware* 

RCS jet driver talkbacks (packed) 


ON/OFF 

1 ' 

PRESSA 

Hardware* 

RCS chamber pressure sensor 

- 

ON/OFF 

25 

PRESSB ■ 

PRESSC 

PRESSD 


talkbacks (packed) 





^Pending design of I OPS 
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Tabl'e 1. RGS- FDI interface requirements (Cont.) 


COMPUTER 

NAME 

SOURCE 

OR 

DESTINATION 

DESCRIPTION 

UNITS 

VALUE 

OR 

RANGE 

SAMPLE 
RATE (Hz) 

MINORjCYCItB 

MS SC 

Flag indicating minor cycle 

- - - 

ON/OFF 

25 

MAJOR_CYCLE 

MS&C 

Flag indicating major cycle 


ON/OFF 

25 

OXY QUANTITY 

RCS SM' 

RCS oxidizer quantity remaining 

Percent 

0-109 

1 



in tanks each module 




FUELJJUANTITY 

RCS SM 

RCS fuel quantity remaining in. 

Percent' 

0-109 

1 


tanks each module 




BTU FF01 13 

FCOS 

Flags indicating failure of 

- 

ON/OFF 

25 

BTU FF01 05 
BTU FF02 1-3 


various MDM data paths 




BTU FF02_0S 
BTU FA01’ 10 






BTU FA01 02 

► 





BTU FA03 10 

h 





BTU_FA03J32 






INIT OVER- 

MS&C, 

Initialization flag for override 

- 

ON/OFF 

1 

RIDE_UPDATE 

MONITOR_ 
BTU MASK 

update 

- 



INIT_OFFAIL 


Initialization flag for OFF AIL 


ON/OFF 

25 

INtT_ONFAUi 


Initialization flag for ONFAIL 


ON/OFF 

1 

OUTPUTS 






MANCOMA 

MANCOMB 

MANCOMC 

MANCOMD 

Hardware* 

Automatic manifold close commands 

— 

ON/OFF 

1 

JFAILA 

JFAILB 

JFAILC 

JFAILD 

Jet Select 

RCS jet failure list 


ON/OFF 

25 

MIN QUANTITY 

CRT SOP 

Lesser of' fuel, oxidizer 
quantities each RCS module 

Percent 

0-109 

1 

FUEL 

CRT SOP 

Flag indicating fuel/oxidizer 

- 

ON/OFF 

1 

IMBALANCE 


ratio out of spec each RCS 




FLAG 


module 





*Pending design of IOPs. 
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1. 3.4.2 STORE_FDI_INITJDA l PA 

STORE_FDI_INIT_DATA snapshots the failure list, the overrides 
from crew input, and the automatic manifold isolation valve close 
commands each major cycle, for use in reinitializing RCS FDI after an 
MDM card failure. Since it is inhibited in the presence of the failure, 
the data it provides for reinitialization will not reflect any errors 
in RCS FDI due to data errors caused by the failure. 

1.3. 4. 3 OVERRIDE_UPDATE 

OVERRIDE_UPDATE receives crew requests to inhibit, reenable, and 
manually override RCS fail status. It ensures that mutually exclusive 
requests are not implemented, and builds a list of which jets are to be 
added to the fail list, and which are to be deleted due to crew requests. 

1 . 3 . 4 . 4 OFFAIL 

OFFAIL detects failures of jets to fire in response to on commands 
from the jet selection software. It compares these on commands with 
chamber pressure discretes generated by pressure sensors and level 
detection equipment in the hardware. When a jet is commanded on but 
.shows no chamber pressure for three consecutive minor cycles, OFFAIL 
adds it to the fail list, unless it is manually overridden by the crew. 

1.2. 4. 5 ONFAIL 

ONFAIL detects leaks in RCS jets, and jet firings occurring in - 
the absence of jet on commands (i.e,, failures to shut off). ONFAIL 
first compares the temperature of the fuel and oxidizer injectors with 
a 30 °F threshold. If either temperature is below this valve, or if 
the driver talkback is on and the jet command is off, for two consecutive 
major cycles, ONFAIL adds the jet to the fail list, and flags it for 
recheck . 

1.3. 4. 6 RECHECK_ONFAILS 

One major cycle after ONFAIL flags jets, they are checked for 
driver on talkbacks or leaks by RECHECK ONFAILS. If those jets 
continue to show leaks or drivers on, RECHECK_ONFAILS issues a command 
to close the isolation valve on the manifold feeding fuel and oxidizer 
to those jets. 
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1. 3.4.7 MANIFOLD_CHECK 


MANIFOLD_CHECK examines the manifold isolation valve open talk- 
backs each minor cycle. If one such talkback was on (open) but goes 
off indicating partial or total closure of the valve, MAHIFOLD_CHECK 
copies the failure status of the jets on that manifold, then adds all 
the jets on that manifold to„the fail list. If one such- talkback 
goes from off' (closed) to on, MANIFOLD_CHECK deletes from the fail 
list those jets on the manifold that were not failed prior to manifold 
closure. 

1.3. 4. 8 FUEL_IMBALANCE 

.FUEL IMBALANCE checks the percentage of fuel and oxidizer remaining 
in the tanks of each of three RCS modules. If the difference between 
the fuel percentage remaining and the oxidizer percentage remaining 
exceeds 1.6, FUEL_IMB ALANCE sets a warning flag for that RCS module 
which is displayed to the crew. . The procedure then picks the lesser of 
fuel or oxidizer in each module and, provides it as the critical quantity 
to the crew display. 
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SECTION 2 


SOFTWARE FORMULATION 


2.1 RCS PDX EXECUTIVE (see automatic flowchart ) 

The software herein described is only a working model for soft- 
ware in the RM, SM, and DSC executives and Is only presented as a con- 
ceptual model. 

The FDI EXECUTIVE will either be executed each minor cycle, or will 
check a flag which will trigger it each minor cycle. The latter is 
implemented for generality. On a minor cycle, the FDI EXECUTIVE calls 
MONITOR_BTU_MASK , OFFAIL, and MANIFOLD__CHECK. A flag indicating a 
major cycle is next checked. On a major cycle', STORE_FDI_INIT_DATA 
and OVERRIDE UPDATE are called, subject to conditions described in 
Section 1.2. FUEL. IMBALANCE is called every major cycle. 
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KCDEL FCS SCHEDULING EDI IN RE,SM, DEC 


*********************** 

* * 

* IF «INC£_CYCL£ = OR *- 

* ~ + 

* **************** ****** 


**** **** ***** ******* *** 

* • 4 

* IF HA JO RECYCLE = ON * 

* * 
**** **** **** ******** *** 


THEN * ********** ****** ********* 

tc C ALL tfONlTOR^BT UNMASK; * 

* ~ ** * 

* call onfall; * 

* * 
* CALL MANIFOLD_CHECK; * 
****** ******************** 


THEN ***************************************** 

— * m • * 

* IF (CALI IHI1 oa I NIT OVEEKIDE UPDATE * 

* *■ - 
* . * 

* OH IBIT_OFrAIL OH INIT_CNFAIL) = OFF * 
***************************************** 


TREN 


***************************** 
* CALL STORE_?DI_INIT_t)A?A: * 
******* ****** **************** 
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l-* 


***************** *** * * *********************************** 

* . * 

* IF (INIT OVERRIDE UPDATE OR CHANGE OVERRIDE STATUS) = * 

* “ * 

* ON * 

* * 
*************** ****************************************** 

I 

i 

I 

**************************************** 

* . . * 

* IF (EECHECKA OR RECHgCKB OR RSCHBCKC * 

* « 

* * 

* OR RECHECKD) HOT = HEX'O' * 

****** *** ******** ************ *********** 

I 
I 
I 

****** ********** 

* CALL ONFAIL; * 

**************** 

I 
I 


THEN ******* 
* 19 * 


******* 


THEN ************************* 

* CALL RECHECK_ONFAILS; * 

************************* 


************************ 

* CALL FUEL_IMBALANCE; * 

* *********************** 



C. S. DEAFER LABORATORY AUTOMATIC FLOWCHABT OF PROCEDURE FDI EXEC 

) 

******#'> 

* 1 9 *f 

*******’ 

I 

J 

) 

************* **** ******** 

* CALL CVEl<EIDE_UPD ATE ; * 

************************* 


(— ■ 
U1 



JANUARY 21,1976. 22:40:31.56 
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2 . 2 RCS PDI 


2.2.1 MONITOR_BTU_MASK (see automatic flowchart) 

MONITOR_BTU_MASK checks eight flags called BTU_MASKs, which indi- 
cate failures in the hardware communication paths between the GPC and 
the RCS hardware. Each flag corresponds to an MDM, and if it is on, 
is assumed to indicate failure of all data paths on that MDM. 

When a BTU_MASK goes on, the procedure adds the jets commanded 
through that MDM to the fail list, and issues a close command to the 
manifold isolation valve controlled through that MDM. The temporary 
flag CALL_INIT is set on. MONITOR_BTU_MASK then checks CALLJCNIT. 

If it is on, the procedure checks the eight BTU_MASKs. When all 
eight are again off, the procedure sets initialization flags for 
OVERRIDE UPDATE, ONFAIL, and OFFAIL, and sets CALL INIT off. 
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C- S. DRAPER laboratory automatic flowchart of procedure honitoh btu mask 
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S. DRAPER LABORATORY AUTOMATIC FLOWCHART OF PROCEDURE MONITOR BTU MASK 
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CD 


CLOSES A MANIFOLD AND JETS CN MCM INDICATING COMM FAULT 
CHANNELIZATION ASSUMED Will HAVE TC CHECK 


*********************** 

* * 

* IF BTU_FFG1_13 = ON *- 

* - - * 

* * * * .* * * * * * * * * * * * * * * * * * * 


*********************** 

* * 

* IF ETU_FF01_05 = ON *- 

* * 
*********************** 


THEN ***************************************** 
* . . * 

* HANCCMA ='«ANCOMA OR MAP_MA NCOMA OR * 

* 1 ; * * 

* * 

* . * 

* MAP^MANCOHA ; * 

* , 2 :* * 

* * 

* * 

* JFAILA = JFAILA OR BIN (16) 1 1* || BIN( * 

* * 

* 
* 

* * 

* CALL_INIT = ON; * 

************************* **#*tt***4 <** ***** 


THEN ***************************************** 


* 16) ».C* ; 

* 


-* * 

* HANCCMA = MANCOMA OR KAP_MANCOM A OR * 

* 3: * * 

* * 

* * 

* MAP_MANCOMA ; * 

*4:* * 

+ * 

* . m * 

* JFAILA ^ JFAILA Oa BIN{16)»0» |j BIN< * 

* * 

*. 16 ) • l f ; * 

* * 

* * * 

* CALL_INIT = ON; * 

***************************** ************ 
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*********************** 

* * 

* IF ETU_FI02_13 ^ ON * 

* * 
*********************** 


**** ******************* 

* * 

* IF BTU_FF02_05 = ON *- 

* * 
*********************** 


*********************** 

* * 

* IF ETU_FA01_10 - ON * 

♦ * 
******* 4 *************** 


* MANCOMH = MANCOMB ON MAP_MANCOMB OR 

* 1-* 


* MAP MANCOMB 


THEN ***************************** ************ 

* . . * 

* 
* 
* 
* 
* 
* 
* 
* 
* 
* 
* 
* 
* 
* 

***************************************** 


* 2 : * 

* 

* 

* JFAILB = JFAILB OR BIN (16) » 1« || BIN( 

* 

* 16) ' 0* ; 

* 


* CALL INIT 


ON; 


THEN ***************************************** 
* • . * 

* MANCOMB = MANCOMB OB MAP_MANCGMB OR * 

* 3: * * 

* * 

♦ * 

* M A P_^ MANCOMB ; * 

* 4 * * * 

* * 

* * 

* JFAIIB = JFAILB OH BIN {16} ’0’ |f BIN( * 

♦ * 

* 
* 
* 

on; * 


* 16) 1 1* ; 

* 

* 

* CALL INIT 


**4************************************** 


THEN ****** ,s * ********* ************************* 
* . . * 

* MANCCHC = MANCOMC OH HAPJMAMCOBC OR * 

* 1 ; * * 

* * 

* * 

♦ MAP_MNCOMC ; * 

* 2 ; * * 

***************************** ************ 
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***************** ****** 

* * 

* IF ETCJ_FA 0 1 _Q 2 = ON *- 

* * 
*********************** 


to 

o 


*********************** 

* * 

* IF ETU_FA0 10 = ON *- 

* * 
*********************** 


***************************************** 
* * 

* JFAIIC = JFAILC OR BIN(16)M # ]| BIN ( * 

* * 

* 16 ) * 0*5 * 

* * 

* * 

* CALL_INIT = ON; + 

********* ******************************** 


THEN ***************************************** 
* . . * 

* NANCCKC = MANCOHC OB flAP_BASCOHC OR * 

* 3 : * * 

* * 

* * 

* HAP^KANCCMC ; * 

* 4 : * * 

* * 

* * 

* JFAIIC = JFAIIC OR DIN (16) • 0* || BIN< * 

* * 

+ 16) • 1* ; * 

* * 

* * 

* CALL_INIT = ON; * 

***************************************** 


THEN **4***4 ***************************** ***** 

* - . * 

♦ HANCCMD = BANCO MB OH KAP^HANCOMD OR * 

* 1 : * * 

* * 

* * 

* BAP MANCOMD ; * 

♦ " 2 :* * 

* * 

* * 

* JFAILD = JFAILD OR BIN (16) 9 V || BIN( * 

* * 

♦ 16), 1 0 f ; * 

* * 

+ m * 

* CALL_INIT = ON; * 

** 4******************* ******* ******* ***** 
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** ** *** * ********* * ***** 

* „ * THEN **********j******************************* 


* IF BTU_FA03_02 = ON * * 

* * - * 
*********************** * 


* 

* 

♦ 

* 

* 

♦ 

♦ 

♦ 

* 

* 

* 

* 


• • . * 

MANCCMD = MANCOMD OR MAP MANCOMD OR * 

3: * * 

♦ 

. * 


HAP_MAHCOHD ; 

* 

4:* 

* 


* 

„ „ 

* 

JFAIID = JFAILD OK BIN (16) *0' 

| | B IN { * 


* 

16) « V ; 

* 


* 

_ 

* 

CAL L_IN IT = ON; 

* 


********************************* ***** 


********************* 

* * .2HEN ************************************************* 


* IF CAL1_INII = ON * * - - * 

*' * * IF (BTU_FF0 1_13 OR BTU_FF01_05 OR BTU_FF02_13 * 

********************* * " * 

* . . * 

* OR BTU_FF02_05 OR 8TU_FA01_10 OR BTU_FA01_02 * 

* * 

* . * 

* OH BTU_FA03_10 OR BT0_FA03_02) = OFF 

* * 


************************************************* 


THEN 


******* 

* 25 * 

******* 
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******* 

* 25 * 

******* 

4 

1 

4 

****************************** 


* * 

* IN11_C VERHIDE_tJPEAT E = CN; * 

* “ ” * 

* * 

* INI1_0NFAI1 = OH; * 

* * 

* * 

* INI1_CFF AIL = ON; * 

* * 

* . * 

* CA1L_INII = OFF; * 


****************************** 


to 

to 



2.2.2 STORE _FDI_INIT_DATA (see automatic flowchart) 


STORE_FDI_INIT_DATA maintains a record of the jet failure list, 
the overrides, and the automatic manifold isolation valve close commands. 
Each time it is called, the procedure copies these items into separate 
storage locations, used only for initialization of the RCS FDI soft- 
ware. 
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NJ 

U1 


| 10 BE. CAILED ONCE PEA HAJC6 CYCLE 

l 

i 

) 

**** ********** *********** 

* . * 

* GOCE_JFAILA = JFAILA; * 

* “ * 

* - * 

* GOCE_JF A1LE = JFAILB; * 

* * 

* - * ' 

* GOCE_ JF AILC = JFAIEC; * 

* * * # * * * * * *** * * * * * * **** * ** 

I 

I 

I 

4 **************************************** 
* * 

* GOCD_JF AILE = JFA1LD ; * 

***************************************** 

I 

1 

I 

I 

***************************************** 

* . * 

* GCCE_CFF_OVEB'fiIDE_A = CFF_CVEBAIDE_A; * 

* * 

* . * 

* GOCE_CFF 0 V 1BBIBE_B = CFF CVES AIDE E ; * 

* ~ * 

* * 

* GOCE_OFF_OV EBBIDE_C = CFF_CVEHAIEE_C; * 

* ” * 

* . . * 

* G0CE_CFF_0VEBB1DE_D = CFi_C VE6HXDE_E; . * 
************************* **************** 

I 

I 

I 

\ 

********* 4 **** * 4 + 4 * 4 * 4 4 44 * 4 * 44 ** 4 4 44*4444 
4 , 4 

4 
4 
4 
4 
4 
4 
4 
4 

* ,.4 

* G00D_0N_GVEHBIDi2 w D = CN_CVEBfiID£_D; * 
4 4444 44 444444 4 44444 444444 4 444 444 4 444 4 4444 

I 


* GCCE„CN_CVEBBIDE„A = CN_OV£ABIDE_A ; 

* 

♦ 

* GOCE_.CN_CVEBEIDE_B = CN_OVEBfi IE I_B ; 

* 

* 

* GOCE_CN_CVE BBIDE_C = CN_OVEABIEE_C; 

* 
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?P 


I 

1 

l 

***************************************** 


* * 

* GOCE.HANCOHA = HANCOMA ; * 

* * 

* * 

* GOCD_MANCOME = MANCCttb; * 


***************************************** 

< 

1 

i 

*************************** 

* * 

* GOCC_MANCOHC = HANCOflC; * 

* * 

* - * 

* GOCE_MAtiCOME = MANCOHE; * 

******£ *********** ********* 


ro 

<J\ 



2,2.3 OVE RRI DE _UP DATE (see automatic flowchart) 

This procedure implements crew inputs to inhibit, override, and 
reenable RCS jets. 

Initialization of this procedure consists of replacing the current 
override lists with copies of the lists provided by STORE_FDI_INIT_DATA. 

Each time it is called, the procedure generates the lists ON__OVER- 
RIDE and OFF_OVERRIDE for use by other RCS FDI software, and modifies 
the fail list to include temporary enables. ON_QVE RRI DE _A, _B , _C,, 
and _D are updated by ORing ON_OVERRIDE with the requests to reenable 
jets ( NEW_0N_0 VE RRI DE ) regardless of FDI, then ANDing the result with 
the complement of the inhibit requests ( NEW_0FF_0 VE RRI DE ) , thus including 
the new requests to reenable jets, and preventing a conflict with the 
new requests to inhibit jets. 

Similarly, OFF_OVERRIDE _A, _B, _C, and _D are updated by ORing 
OFF_OVERRI DE with the requests to Inhibit jets, then ANDing the result 
with the complement of requests to reenable jets, thus including new 
inhibits, and preventing conflicts with new reenables. 

JFAIL is then modified to incorporate requests to reenable jets, 
while still performing FDI on them. This is done by ORing JFAIL with 
these requests (TEMP_ON_OVERRIDE) . 
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to 

lO 


I 

* 4 ****************************** 

* * 

* IF UII C VERB ID E_UP DATE = ON *- 

* " “ * 
******************************** 


THEN A*********************** ***************** 


* ON_OVERRIDE_A = GOOD_ON_OVERRIDE_A;. * 


* 

4 

* ON_OVERRID3_B = G00D_0 N_0 V ERR X DE_ B ; 

* 

* ' 

* ON„OVERRIDE_C = GOOD_ON_OVERRIDE_C ; 

* 

* „ * 

* ON_OVERRIDE_D = „GOOD_ON_OVERRIDE_D; 

* 


* CFF_OVERRID£_A = GOOD_OFF_CVSRRIDE_A ; * 


* CFF_0V EHRI D E_fl = GOOD_OFF_CVEHRI DE_B; * 

* * 


* OFF_OYERHIDE_C = GG0D_0FF_CV3RRIDE_C; * 


* 

* 


* CFF_OVERRIDE_D = GOOD_OFF_OVERRIDE_D; * 

* “ ” “ ~ * 

* * 
* INIT_0 VER RI DE_UPDATE = OFF; * 

***************************************** 


****************************************************** 
* . . * 

* CN CVERHIDE_A = ON_CVERBIDE_A C h MANUAL_OVEH£IDE_A * 

* * 

* * 

* AND (NCI INHIEIT_A) ; * 

* * 

* - - * 

* CN CVERRXDE_B = 0N_CV£NE1DE B OS M ANU AL_OVER RIDE_B * 

* “ * 

* * 

* AND (NCI INHIBIT_B) ; * 

* * 
* . . „ * 

* CN OVERRIDE C = ON_CVERHIDE_C Ct MANUAL OVERSIDE C * 

* 7 * 

* * 

* AND (NCI INHIBIT_C) ; * 

****************************************************** 

1 
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U) 

o 


4 ********************************************* ******** 


* - . * 

* C N OVERRIDE I = ON_CVEHEIDE_E Ci HA NUAL_QV SR R1DE_D * 

* * 

* * 

* ARC (NCI INHIBITED) ; * 

* * 

» - . * 

* CFF_0 VERRIDE_A = OFF CVERKILE A OR INHIBIT A * 

* * 

* . * 

* AND (NCI MANUAL CVERR1DE_A) ; * 

* * 

* • % „ * 

* CFF OVERRIEE B = OFF OVERRIDE E CR I NrilEIT B * 

* * 

* * 

* AND ( NCI MANUAL_OVLRRILE_B) ; * 

* * 

* . . * 

* CFF OVERRIDE C = CFF CVEHRIEE_C CR INHIBIT C ' * 

* * 

♦ * 

* aND (NOI MANUAl OVERRIDE C) ; * 

• * 

* . - * 

* CFF_0 VERRI L E_D = GFF_CVti:(hIEl_L CR IMIIEIT_D * 

* ~ * 

* . * 

* AND (NOI MANUAL OVERRIDE_C) ; * 

* * 

* - * 

* JFAILA = JFAILA AND (NOI AU1_CVEHRILE_A) ; * 

* * 

* - * 

* JFAILB = JFAILB AND ( NOI AUI_CV EfiKICE_E) ; * 

* ' * 

* . * 

* JFAILC = JIAILC AND (NOI AUI_CVE BHICE_C) ; * 

* * 

* - '* 

* OFAILD = J FAILD ANL (NOI A UI_C V ERRIDE_D) J * 

* * 

* * 

* CHA NO E_CVE RRIDE_STATUS = OFF; * 


444 4444 444444.44444*44**** ************* **************** 



2.2.4 OFF AIL (see automatic flowchart ) 

OFFAIL detects failures of jets to fire in response to "ON" com- 
mands from the GPC. 

Upon initialization, OFFAIL replaces the jet fail list with the 
fail list stored by STORE_FDI_INIT_DATA, and zeroes the first slot in 
its pushdown list. 

Bach time it is called, OFFAIL first advances its three-level 
pushdown lists OFA, OFB, OFC, and OFD. That is, the jets in the second 
slot are moved into the third slot, and those in the first slot are 
moved into the second. OFFAIL then moves into the first slot those 
jets which are commanded on but whose pressure transducer talkbacks 
are off. OFFAIL adds to the jet fail list those g.ets- ‘which appear in 
all three slots by ORing those three slots, with .the" fail list. Finally, 
OFFAIL implements the reenable command 'by ANDing the jet fail list with 
the complement of ON_OVERRIDE . 
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ti i! ii m ii it ii n ii ii imi imi 

■■ OFF AIL I " 

ii ii 

" PROCEDURE; M 

II II III! IMI II U I1 11 II M II If 


MAY WANT TO CALL GlhEE KINCIt CYCLE STUFF F&OM HERE TO 
SAVE COMFAULT CHECKING 


**** ******************* 

♦ * 

* IF INIT.OFFAIL - ON * 

* * 
*********************** 


CO 

to 


THEN ************************* 

t* „ * * 

* JFAILA = GOOD_J?AILA; * 

* * 
* * * 

* JFAIIB = GCOD^JFAILB; * 

* * 


* JFAIIC = GCOD_JFAILC; * 

* * 
* . * 

* GFAILD = GOOD_J FAILD ; * 

* * 

* * 
♦ 0FB1 = BIN (32 ) 1 0»; * 


* OFC 1 = BIN {32) 1 O' ; * 


* * 

* OFD 1 ■= BIN (32) 1 0*; * 

* * 

* * 

* INI1J3FFAIL = OFF; * 


************************* 


**************** 

* . 

„ * 

* CF A3 = 

CFA2; * 

* 

* 

* . 

• * 

* CFB3 = 

CFB2; * 


**************** 


i 

i 

i 
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4 * ****************************** ********** 


* . * 

* CFC3 = CFC2; * 

* + 

* . * 

* CFE3 = CFD2; * 

* * 

* . * 

* CFA2 = CFA1 ; * 

* . * 

* . * 

* CFH2 = CFB1 ; * 

* * 

* * 

* CFC2 = CFC1; * 

* * 

* - * 

* CFE2 = CFD 1 ; * 

* * 

* . . . * 

* CFA1 = OETCCMA AND (NCT PKESSA) ; * 

* * 

* _ . * 

W * OF B 1 = JETCCMB AND (NCT PRESS t ) ; * 

* * 

* . - * 

* CFC1 = OETCCKC AND (NCT PRESSC) ; * 

* * 

* . . . . * 

* OFD 1 = JEICCBD AND (NCT PRESSE) } * 


****************************************** 

1 



JANUARY 21 ,1976 


22:«0: 31.56 


3U 



C. S. DRAPER LABORATORY AUTOMATIC FLOWCHART OF PROCEDURE OFFAII 


U) 

>P=. 


| EC NT FAIL JETS CVtBKIEEEN AS GCCD 

< 

I 

it********************************,********* 


* . . . + 

* JFA1LA = (JFAILA C6 {CFA3 AND CEA2 AND * 

* * 

♦ . - * 

* CFii1> ) AND (ACT ON_OVEBbIE£_A) ; * 

* * 

* . . , * 

* JF AIL B = ( JFA ILB CR (CFE3 AND C\EE2 AND * 

* * 

* . . * 

* OF B 1) ) AND (NOT 0N_CVEBB1DE_B) J * 

* * 

* . - . * 

* JFAILC » (JEAILC Cb (CFC3 AND CEC2 AND * 

* * 

* * - * 

* CFC 1) ) AND (NOT ON_CV EK SI DE_C) ; * 


****************************************** 

l 

I 

I 

****************************************** 
* . . . . * 

* JFAILE = (JEAJLD CB (CFE3 AND CEE2 AND * 

* * 

* . * 


* CFD1) ) AND (NOT ON_OV£RBIBE_D) ; * 

****************************************** 


JANUARY 21,1976. 22:40:31.56 
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2.2.5 ONFAIL (see automatic flowchart ) 

ONFAIL detects failures of jets to shut off in response to off 
commands, spurious RCS firings, and RCS fuel and oxidizer leaks within 
the jets. 

Upon initialization, ONFAIL sets the automatic manifold isolation 
valve close commands equal to the good copies from STORE_J?DI_INIT_DATA. 

Each pass, ONFAIL checks leak detector outputs, combines them 
with driver talkbacks, checks for failed on jets, and flags such jets 
for rechecking. 

To check leak detector output, ONFAIL 'treats each output as a 
string of 16 bits. It ANDs each output with a mask representing the 
logical complement of a 31°F output {BIN ’1111111111000000'). Since 
the transition from 30 °F to 31°F occurs in the bit strings as 
BIN '0000000000111111' to BIN ’0000000001000000', the result will be 
BIN ' 000000000 0000000 ' if the indicated temperature is below 31°F, 
the condition for a leak. If this occurs for either the fuel or oxi- 
dizer injector temperature sensor, ONFAIL sets the software copy of 
the driver talkback to on (or leaves it on if it is already so) . 

Having completed this , ONFAIL loads into the first slot of its push- 
down list (NEWFAIL) those jets not commanded on, but whose driver 
talkbacks are on and which have not been previously failed by ONFAIL, 
by ANDing the driver talkbacks with the logical complement of the jet 
commands ORed with the previous fail data. ONFAIL then adds to the 
fail list, and flags for recheck, those jets which are in both slots 
of the pushdown list. Finally, ONFAIL advances its pushdown list for 
the next pass, by loading entries from the first slot into the second 
slot. 
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ft ti n it ft ft it ti tf imi it ttfi 

» CNF AIL ; ff 

if it 

" ERCCEDUBEi " 

ii ii tin n mi n n niitt tin 


U> 

CT> 


* ********************** 

* * 

* IF IN II^ONF AIL = ON * 

♦ * 
*********************** 


THEN *************************** 


* _ * 

* MANCCMA = GOOD^MANCOMA; * 

4 * 

* „ * 

* HANCCMB = GOOD^MANCOHB; * 

* * 

* m * 

* MANCCMC = GOOD MANCOMC; * 

* * 
* * 

* MANCGHD = GOOD^ttANCOMD; * 

* * 

* * 
* INIT_ONFAIL = OFF; * 


*************************** 
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(. HOBD A 

I 

I 

I 

♦ 4*4,44444 444 4 4 t**'**** 4 *44 44 44444444444****44444* 4 i*44 4*4i*44‘44*4*4 4** *44*** 

* DO FOB I = 1 TO 8 BY 1; * — * i . 4 

44.4***4*44*444*44444*4*44*4 4 if ( (FLEAK AND MASK_THRESHGLD) = HEX* O') * 


* I:* • * THFN 44*4*** 

* *----■_-« * qq * 

4 . . * 44*4444 

* CR ({OLEAK AND MASK_THBESHOLD ) = HEX'O’’) * 

* I:* * 

44*****4*4 *****44**44**44* 4*44***444*44* 4444*4 


i WORE B 

1 . 

i. 

**************************** ************************************ ********** 


4 DO FOE I = S TO 1b BY 1; * 

* 


* 

* * 

* 


**************************** 

* 

IF 

( (FLEAK AND 

m ask_threshold> 

= HEX’O*) 4 



* 


I:* 


* 

THEN ******* 

» 

* 






1 

* 



m 

* 

4444444 

1 

* 

OB 

((OLEAK AND 

MASK_I HHESHOLD) 

= HEX'O’) * 


1 

* 


I; * 


4 



************ ********************************** 


WORD C 


***************************** 


* DO FOR I = ‘17 TO 30 BY 1; * 

***************************** 


o-o 

to 


4444 44 4 4 44444444444 4444 4 4444444 44 44 44444 444444 


* 4 

* IF ((FLEAK AND MAS K_ THRESHOLD) = HEX'O’) 4 

* I:* ' ” 4 

4 4i 

* 4 

* OK ((CLEAK AND MASK THRESHOLD) = HEX’O ' ) 4 

* X:* 4 


4444*44444444444444444444444444444444444444444 


THEN 4444*44 

— --4 qg * 

4444444 
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| WORE D 

1 
i 

************************+**** * ********************************** *********** 


* DO FOR I = 21 TO 44 BY 1; * * . * 

***************************** * Xj ( (F1EAK AND t!ASK_THR£SHOLD) = HEX'O') * 

i * I:* * 

| * * 

| * * 

I * OH ( (CLEAR AND MASK .THRESHOLD) = HEX'O’) * 

| * I • * * 


********************************************** 


THEN ******* 

* 47 * 

******* 


OJ 

CO 
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W 

ID 


i 

I 

i 

*******#*************+*********+*»******** 


* - - * 

* BEHFAILA = EEIVERA AND KOI {JE1CCHA CB * 

* * 

* * 

* PKEV FAI1A) ; * 

* * 

* . . * 

* KEHEAIlt = EKIVEBB AHE NOT (JETCCBB CB * 

* * 

* * 

* PRE V_I AILB) ; * 

* * 

* . . * 

* NEKFAIIC = EEIVERC ANE NOT (JE1CCMC CB * 

* * 

* * 

+ EH£ V_ FAILC ) ; * 

♦ * 

* . . * 

* hESFjilLE = EBIVERD AKl NOT (JEICCMD CB * 

♦ * 

* * 

* FEE V_F AILC) ; * 

* ~ * 

* . . * 

* BBC HECK A = HEWFAIL/i ANE OLCFAILA; * 

* * 

* . . * 

* EEC HECKfl = NEWFA1LB AND OJ.DFAIW; * 

* * 

* . . * 

* BECHECKC = NEWFAI1C AND OLDF AILC ; * 

* * 

* . . . * 
+ 8ECHECKE = KEHFAILD AND OLEFAILE; * 


4 * ****** 4 ** ******************* ********* 

I 

I 

J 

* 4 ** * 4*4*4**** ******** ********** 

♦ * - * 

* JFAILA = JFAILA Ofi SECHLCKA ; * 

* * 

* m . * 

* JFAILB = JFAILB Ofi H£C HECKfi; * 

♦ * 

♦ - * 

♦ JF AILC - JFAILC OR fiECHECKCj * 

4 ******************************* 
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************************************************ 

* * 


* 

JFAILD = 

JFAILD OR . 

HECHECKC; 



* 

* 







* 

* 

m 

. 




« 

* 

* 

CLDFA IL A 

= NESFAILA 

ARC 

( RCX 

0N_ 

CVE£fiID£_A) J 

* 

* 







* 

* 

. 

» 




. 

* 

* 

CLDIAILE 

= NEWFAILB 

AND 

(NOT 

ON.. 

CV EERIE E_B) ; 

* 

* 







* 

* 

m 





„ 

* 

♦ 

0LLFA1LC 

= NEWFAILC 

ARD 

(NOT 

D 

S'* 

1 

CV E RBIEE_C) ; 

♦ 

* 







* 

* 

_ 

* 





♦ 

♦ 

CLDFA ILC 

= NEWFAILD 

AND 

(NCI 

CR_ 

CVEBRIBE^D) ; 

♦ 


**** 44 ************** ******************* ********* 


& 

o 
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*4 44444 

4 4 4 * 

4**4 *4* 


I 

I 

I 

MU*4*4**t****+*** + i* + ++<-***i}**** + * 

* . m '4 

* FRIVEBA = FRIVERA OR HAPWCRE ; * 

* ' II * * 

4444444*4* 4444*44+*** + + + 4 ++4+4+44 4 44 


444444* 

4 4 5 * 

4444 444 

i 

I 

i 

4444 4 44 *4 444 4*4 *44*44 4 4 44 44 4444*4 4 44 

♦ . . 4 

* CHIVERE - t HI VERB OR KAPWCRE ; * 

4 X ; * 4 

4 444 4444 4444444*4 444 4* 4444 + 444*44 4*4 


4444444 

+ 46 * 

4444444 

1 

1 

i 

4 ****************** ***************** 
* . . „ * 

* CBIVEHC = EBIVEEC OH HAEHCRE ; * 

* Ij* * 
44 *** 4 * ***************************** 


******* 

* 4 7 * 

******* 

I 

I 

************************************ 

* . * 

* CEIViKE = DHIVEBD OR KAiWCHC ; * 

* X:* * . 

************** ********************** * 
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2.2.6 RE CHECK^jONF AX LS (see automatic flowchart ) 

RECHE CK_ONF AI LS examines those jets which have been added by 
ONFAIL to the. jet fail list on the previous major cycle, and closes 
the manifold isolation vlaves for those jets which still indicate leaks, 
or whose driver talkbacks remain on. The procedure then flags as 
previously rechecked, those jets currently, flagged for rechecking, 
by ORing PREV_FAIL and RECHECK. 
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i. ii ii tt ti M ii n ii fi ii ii ti n ii n it if ii n if 


" RECHECK CNF AILS; 


it 

*' PROCEDURE; 

II II II If II II If II II fl II It It II II II III! Hit II 


II 

II 


4* 

CO 


* ** * ****************** *** **** ** * 

* DO FOR IEMPCRAJxX L = 1 TO 4 ; * 

******* ************************* 


***************************************** 

■ * , „ „ * , 

* IF (NSWFAILA AND RECHECKA AND MAP ) * 

* L:* *--' 

* * 

* NOT - HEX 1 0 1 * 

***** ** ** ****** * ************************* 

i 

i 

i 

***** ********************_***-****-*■********** 

* - , * 

* IF (NEWFAIIB AND BECHECKB AMD MAP ) * 

* L + 4: * *■ 

* * 

* NCI = HEX' 0 ' * 

*44444444444**4 4*4* 4 4*44 4444 44*4 4 44 44444444 


I 


THEN 444*44 44*444444444*444**4*44* 

4 . . * 

* KANCCMA = MAP_ BANCO M A ; * 

* ” J,;4 * 

4 4*44* 4*4444 4444 44444 44444 4*4 


THEN *44 4 4 44 44**444444*4 4*444 444 4* 

* , . 4 

* MANCOMB = MAP_M ANCOMB ; * 

, * L:* * 

4444 444*44*444 4 4 4*44 4444 4.4 4 44 
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+***********#************************ ****** 

* . - * 

* IF (NEHFAILC AND RECKECKC AND HAP ) * 

* L+ 8: * * 

* * 

* NOT = HEX * 0 • * 

****************************************** * 


I 

I 

* 4 4 ************ 44 44444444444*4*4444 *444444 44 

* . . * 

* IF (NEWFAILD AND EECHECKD AND HAP ) * 

* 1 + 12 :* *- 
* * 

* NCI = HEX ' 0 * ' * 

******** *********** *********************** ** 


Ji **************************************** 

^ * . * 

* PKEV_FAI1A = PK£V_FAILA OB RECHECKA ; * 

♦ * 

* , . * 

* PREV^FAILB = FREV_F AILB Ok UECH£CKB ; * 

* + 

* . „ 4 

* PREV_FAILC = FBEV^FAIIC OH HECHECKC; * 

* * 
* . * 
♦ PfiEV^FAILD = PHEV^FAIID Ok BECHECKD; * 
4 * 44 444 4 * ****** 44 * 44444 44 44 4 44 * 4 *>*4444 4 


THEN *** 4*44444 4(4*44444*444*4 444 44 

4 „ . * 

* HANCQHC - MAP^tf ANCCIC ; * 

♦ ~ Lj* * 

44444444444444444444444444444 


THEN 444 4**4***444*4*44***4:4 444444 

4 . . . * 

* MANCOHD = NAP HANCOHD ; * 

* L:* * 

***************************** 



2.2.7 MANIFOLD CHECK (see automatic flowchart ) 

MANIFOLD^CHECK compares the manifold isolation valve OPEN talk- 
backs with their values on the last pass through MANIFOLD_CHECK. If a 
manifold isolation valve OPEN talkback changes from OFF to ON, the 
jets on that manifold not failed prior to valve closure are deleted 
from the jet fail list, by ANDing JFAIL and the complement of 
REINSTATE for this manifold. 

* If a manifold isolation valve OPEN talkback changes from ON to 

OFF, MANIFOLD CHECK does the following. First, a record of the jets 

on the manifold which are not failed at the time of manifold closure 
is made by ANDing the complement of the jet fail list with a map of 
the jets on this manifold. Next, the map of the jets on this manifold 
is ORed with the jet fail list to add those jets to the fail list. 
Finally, the complement of the map of jets on this manifold is ANDed 
with ON_OVERRIDE_A to prevent RCS FDI deleting those jets from the 
fail list while the manifold isolation valve is closed. 

MANIFOLD_CHECK then ORs the OFF_OVERRIDEs with the fail list to 
implement the crew inhibit function. Finally, a copy of the current 
manifold isolation valve OPEN talkbacks is stored for use on the next 
pass . 
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ii ii mi ii mi n n mi n n ii n n n ii n ii 


" HAN1j?OLE_CHECK: " 

n ii 


" PROCEDURE ; 

ll II nil n mi n n n n ii n n it linn mi 
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ip> 

Cl 


********************************************* 

* IF NOE (I VOA , OLL_IYOA) NCI = E I N ( 1 6) <0* * 

* f 

* IHEN DC; * 

********************************************* 

1 

J 

t 

*44 4 *44 44*444**44*4444 jo*****************#*#***: 

* DO 108 I = 1 TO 4 ; * * - * 

********************** * u IVCA = ON * 

J * MAP IVCA * 

I * I * 

I * * 

| *«,«**** 4*.** + *** ********* 


THE K 4 444*4*4444 44***444 4444=4 *4* 4* 4*4* 444**44*4 

4 * „ • * 

| * JF\ILA » JFAILA AND NOT REINSTATFA ; * 

I * X: * * 

j 44444444444 *** 4 * 4 * 44 ***** 44 ***** 4 ********* 


ELSF *4* *44*444* **44* *4* ***** 4***4 **4* ***4*4 4* 


f- * , ^ „ * 

* REINST AT E A = KAPA AND NOT JFAILA; * 

* Is* I:* ‘ * 

* 4 

* . * 

* JFAILA = JFAILA OR ?APA ; * 

* I* * * 

* * 
* - * 

* ON_OVERRIDE_A = 0 N_0V2RRIDE_A AND NOT * 

* * 

4 „ * 

* MAPA ; * 

* I; * * 


.444 44 44 4444 4444 4*4*4*444 4*4**444 4 44*44*44 


* END; * 

****44*4 

I 

\ 


k 
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*********************+*********************** 

* ELSE DO; * 

* * 

* IF XOB (IVCE, CLE__I V C E) HOT = EIN<16) 'O' * 

* * 

* IHEN DO; * 

********************************************* 

I 


*************4******** 

* DO FOE I = 1 TO 4; *- 

********************** 


& Q 

■ sg 

il 

N& 


********** *4************ 

- * ^ # 

* IF I VCB = ON * 

* MAP_IVCB *- 

* I * 

* 4 
************************ 


****,*** ************************************** 
4 END ; * 

* * 

* ELSE DC; * 

* * 

* IF XQB (IV GC r OLD_IVCC) NCI = E IN (16) *0* * 

* * 

* IHEN DC; * 

********************************************* 

I 

i 

I 


IHEN *************************************** *** 
* . . * 

* JFAILB = JFAILB AND NOT REINSTATER ; * 

* I;* * 

****************************************** 


| ELSE ***************+************ ***** ******** 

+ T * - * 

* [ REINSTATEB] = HAPB AND NOT JFAT1B; * 

* x:* * 


* JFAILB = JFAILB OR MAPB ; * 

* Is* * 

* * 

* . * 

* ON_OVERRIDE_B = ON_OV5RRIDE_B AND NOT * 

* * 

* . * 

* KAPB ; * 

* I : * * 

************************ ***************** 
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**** * ********** ******* 

♦ DO FOR I = 1 TO 4; * 

********************** 


************** ********** 


* * 

* IF IVGC — ON * 

* MAP IVCC * 

* I * 

* * 


*44 ************ 4 ******** 


THEN ***** ** **** ******** ***** ********* ********* 

♦ * . . * 

I * JFAILC = JFAILC AND NOT REINSTATEC ; * 

| * I:* * 

j *********** ******************************* 


CO 



********************************************* 

* ENE; * 

* . * 

* ELSE DC ; * 

* + 

* IF XOR (IYCE, OLD_IVOE) NCI = BIN (16) *0' * 

* * 

* THEN EC; * 

********************************************* 

i 

I 

I 

********************** ************************ 

* DO EOH I = 1 TO 4; * ' * . * 

********************** * IVCD = ON * 

* HAP IVOD .* 

* 1 * 

* * 
************************ 


ELSE ***************************************** 


+ * . . . * 

* REINSTATEC = HAPC AND NOT JFAILC; * 

* !•* X:* * 

* * 

* * 

* JFAILC * JFAILC OR HAPC ; * 

* i: * * 

* * 

* m * 

* ON_OYERBIDE_C = ON_OVERRIDE_C AND NOT * 

* - - ^ 

* • * 

* MAPC ; * 

* X : * * 


******************* ********************** 


THEN ******+***************** ****************** 

+ * - . * 

| * JFAILD = JFAILD AND NOT REINSTATED : * 

j * I-* * 

I ****************************************** 
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************************************** 


* 

END; 





4 

♦ 






4 

* 

END; 





4 

* 






4 

4 

end: 





4 

* 






4 

4 

END; 





4 

* 






* 

* 

* 





4 

4 

JFAILi = 

JFAILA OR 

OEE_ 

OVER R1CL_ 

a: 

4 

* 






4 

* 


„ 


- 


4 

4 

JFAILE = 

J FAILS OR 

CFF_ 

OVERRIDE^ 

E ; 

4 

4 






4 

4 

w 

* 


. 


4 

* 

JFflIEC = 

JFAILC OR 

OIF_ 

CVIERICI^ 

c; 

* 

4 






4 

4 




m 


4 

4 

JFAILL = 

JFAILD OR 

CFF_ 

OVERRIDE^ 

c; 

4 

4 






4 

* 

_ 

„ 




4 

4 

CLE_IVCA 

= IVCA ; 




4 

* 






4 

4 

„ 

. 




4 

4 

CLD_IVCE 

= IVOB; 




4 

4 






4 

4 

„ 

* 




4 

4 

CLE_I VCC 

= IVOC ; 




4 

4 






4 

* 

„ 

_ 




4 

4 

CLL_IVO£ 

= I VCD; 




4 


***************** **** ***** 4$4 t 


| ELSE *********** ******** ************** ******** 


* * . - , * 

* REINSTATED * MAPD AND NOT JFAILD; * 

* X:* I:* * 

* * 

* . * 

* JFAILD = JFAILD OR MAPD ; * 

* I- * * 

* * 
* 

* 

* * 

* * 

* MAPD : * 

* I:* * 


************************ ***************** 


# * 



2.2.8 FUEL^ IMBALANCE (see automatic flowchart ) 

FUEL_IMBALANCE receives fuel quantities and oxidizer quantities 
in the RCS tanks in each of the three RCS modules. These quantities 
are expressed as percent of tank -capacity . The procedure compares 
the quantities, and also compares their difference to a preset thresh- 
old. if the magnitude of the difference between the percentages is 
greater than 1.6, an imbalance flag is set. FUEL_IMBALANCE then de- 
cides whether the remaining oxidizer in each module is less than 
the fuel quantity remaining in that module. If so, it flags the 
oxidizer as the lesser quantity, and provides it for display. - Other- 
wise, it flags the fuel quantity and makes it similarly available. 
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n ii n it « n ti ii H n <1 it ii h n it n tm « 


» I0EI IMBALANCE: 11 

ii “ ii 


" PROCEDURE ; 

ii ii mi ii n ii ii ii ii ii ii ii ii ii mi ii ii ii 


CHECKS RATIO OF FUEL QUANTITY TO OXY QUANTITY IN EACH 
OF THREE PAIRS CF TANKS AND FLAGS IMBALANCE IC WARN CP.EH 


******************************** 
* * 
♦ £ FUEL_IfiBALANCE_ > FLAG ] = OFF; * 
**** ********************* ******* 

I 

I 


Ln 

H 
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4*** ****************** 

* DO FOR I - 1 TO 3; ♦ 

********************** 


******************************************* 

* IF ABS(OXY_QUANTITY - FUEL_uUANTITY ) > * 

* X I * 

* * 


* <IHBA1ANCE_THRESH0LD * 

* * 
-** ***************************************** 

I 


THEN ******************************* 
* _ * 

* FUEL_INBMANCE_FLAG = ON; * 

* I:* * 

******************************* 


I 

♦♦a********************************* 

* >IF OXY QUANTITY > FUEL QUANTITY * 

* I I * 

* * 
************************************ 


THEN ********************************** 

+ * hin_QUANTITY = FUEL QUANTITY ; * 

| * I I * 

i ********************************** 


| ELSE ************************* ******** 

+ * MIN_QUANTITY = OXY QUANTITY ; * 

* I I * 

********************************* 


Ln 

to 



2.2.9 Core Requirements and CPU Time 


The timing and core requirements (Table 2) for RCS FDI are esti- 
mates based on results of compilation by the HAL/S and HAL/F compilers 
(HAL/S release 14.0 of 16 Dec. 75, HAL/F release 10.0 of 16 Dec. 75). 

They are not to be. taken as final values, as studies of code and timing 
optimization are still in progress, and requirements levied on RCS FDI 
are in a state of flux. 

Table 2. Approximate RCS FDI CPU times and burden (minor cycle - 0.04 s, 
major cycle = 1.0 s) . 


Procedure 

Portion 

Case 

Time 

(vs) 

%CPU 

FDIJEXEC 



minor cycle 

22.8 

0.057 




major cycle, 
worst 

66.1 

0.165 

MON I TOR_BTU_MASK 



no- BTU_MASKs 
on 

103.0 

0.258 




worst 

296.9 

0.742 

S TORE_FDI_INIT_DATA 



all 

81.4 

0.0081 

0 VERRI DE_UP DATE 

init 



40.'6 

0.0041 


all but 

init 

each pass 

122.6 

0.012 

OFFAIL 

init 



34.9 

0.087 


all but 

init 

each pass 

114.3 

0.286 

RECHECKJONFAILS 



one fail, 
close mani- 
fold 

308.3 

0.03083 

ONFAIL 

init 



26.2 

0.00262 


all but 

init 

one leak 

924.8 

0.0925 

MANIFOLD CHECK. 



one change, 
longest path 
through code 

350.1 

0.876 

F UE L_I MB ALAN CE 



worst 

151.2 

0.01512 

Total worst case (no 

inits) 




2.235 


Core requirements 
Program 575 whole words 

Data 285 whole words 
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SECTION 3 


GLOSSARY 


Table 3 describes all variables and constants used in RCS FDI. 
The entries are listed alphabetically by computer name. 
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Table 3 . RCS FDI glossary 



Computer Name 

Type/ 

Attribute 

Description 

Units 

Value 

Range 

Declared In 

Assigned In 

"Referenced In 

ON_OVERRIDE_A 

ONjQVERRIDEjB 

QN_OVERRIDE_C 

ON_OVERRIDE_D 

Bit (32) 

List of ^ets to be deleted from 
fail list by crew 


TBD 

COMPOOL 

HDWRE/IOP 

ONFATL 

OXY_QUANTITY 

Array (3)/ 
Integer 

Oxidizer remaining m RCS tanks 

percent 

0-109 

COMPOOL 

RCS_PVT 

FUEL_IMBALANCE 

PRESSA 
PRESSB 
PRES SC 
PRESSD 

Bit (32) 

Packed jet chamber pressure 
sensor talkbacks 


ON/OFF 

COMPOOL 

HDWRE/IOP 

OFFAIL 

PREVJFAILA 
PREVJFAILB 
PREV_FAILC 
PREV FAILD 

Blt(32) 

Record of ;jets previously 
rechecked 


ON/OFF 

COMPOOL 

RECHECKONFAIL 

ONFAIL 

RECHECKA 

RECHECKB 

RECHECKC 

RECHECKD 

Bit(32) 

List of failed ^ets flagged for 
re check 


ON/OFF 

COMPOOL 

ONFAIL 

RECHECKJDNFAILS 

RE INSTATE A 
REINSTATED 
REINSTATEC 
REINSTATED 

Array (4)/ 
Bit (32) 

List of gets on each manifold 
failed prior to isolation 
valve closure 


ON/OFF 

MANI FOLD_CH ECK 

MANIFOLDJEHECK 

MANIFOLD J3HECK 











Table 3. RCS FDI glossary (Cont.) 


Computer Name 

Type/ 

Attribute 

Description 

Units 

Value 

Range 

Declared In 

Assigned In 

Referenced in 

GOODJFAILA 

GOODJFAILB 

GOODJFAILC 

GOOD_JFAXLD 

Bit (32) 

Copies of ECS fail list stored 
for initialization 


ON/OFF 

COMPOOL 

STORE_FDI_INIT_ 

DATA 

OFFAIL 

GOODJ4ANCOMA 
GOOD_MAN COMB 
GOO D_MAN C OMC 
GOOD_MANCOMD 

Bit(32) 

Copies of manifold isolation 
valve automatic close commands 
stored for initialization 


ON/OFF 

COMPOOL 

STORE_FDI_INIT_ 

DATA 

ONFAIL 

GOOD__OFF_OVERRIDE_A 
GOOD_OFFJOVERRIDE_B 
GOOD_OFF JDVE RRI DE__C 
GOOD_OFF _0 VERRI DE_D 

Bit (32) 

Copies of off overrides stored 
for initialization 


ON/OFF 

compool 

S TORE J?DI_INIT 
DATA 

O VE RRI DE_UP DATE 

GOOD_ON_OVERRIDEJ\ 
GOOD_ON_OVERRIDE_B 
GOO D J3N_OVE RRI DE C 
GOOD_ON_OVERRIDE_D 

Bit (32) 

Copies of on overrides stored 
for initialization 


ON/OFF 

COMPOOL 

STORE_FDI_INIT 

DATA 

OVERRI DEJEJPDATE 

r 

Integer 

Counter 

— 

1, 2, 3, 
4 

COMPOOL 


. 

I MBALANCE_THRESHOLD 

Integer 

1/2 range of acceptable RCS 
tank fuel/oxidizer quantities 

— 

TBD 

FUEL_IMBALANCE 

Initialization 
{Mission Constant) 

FUELJCMBALANCE 

INHIBIT_A 

IHHIBIT_B 

INHIBITJ2 

.INHIBITJ) 

Blt(32) 

Packed requests to inhibit use 
of certain RCS nets 


ON/OFF 

COMPOOL 

DSC SOP 

OVERRIDEJJPDATE 

INI?_OFFAIL 

Bit(l) 

Initialization flag for OFFAIL 

— 

ON/OFF 

COMPOOL 

MS SC, MONITOR^ 
BTCJ_MASK 

OFFAIL 



Table 3. RCS FDI glossary (Cont) 


Computer Name 

Type/ 

Attribute 

Description 

Units 

Value 

Range 

Declared In 

Assigned In 

Referenced In 

INIT_ONFAIL 

Blt(l) 

Initialization flag for ONFAIL 

— 

ON/OFF 

COMPOOL 

MS&C, MONITOR_ 

ONFAIL 







BTUJJASK 


INIT_OVERRIDE_UPDATE 

Blt(l) 

Initialization flag for OVERRIDE_ 

— 

ON/OFF 

COMPOOL 

MS SC, MONITOR_ 

ONFAIL 



UPDATE 




BTUJMASK 


IVOA 

Bit(16) 

Manifold isolation valve OPEN 

— 

ON/OFF 

COMPOOIi 

HDWRE/IOP 

MANI FOLD_C HECK 

IVOB 


talkbacks 





/ 

XVOC 








IVOD 








JETCOMA 

Bit(32) 

RCS ;jet commands 

— 

ON/OFF 

COMPOOL 

JET_S ELECT 

ONFAIL, OFFAIL 

JETCOMB 








JETCOMC 








JETCOMD 








JFAILA 

Bit (32) 

RCS fail list 

— 

ON/OFF 

COMPOOL 

ONFAIL, OFFAIL, 

JET^SELECT, 

JFAILB 






MANXFOLD_CHECK, 

DSC SOP 

JFAILC 






OVERRIDEJJPDATE, 


JFAILD 






MONITOR_BTU_MAS K 


MA JO R_CY CLE 

Bit (1) 

Ma^or cycle flag 

— 

ON/OFF 

COMPOOL 

FCOS 

FDI__EXEC 

MANCOMA 

Bit (32) 

Manifold isolation valve auto- 

— 

ON/OFF 

COMPOOL 

ONFAIL, MONITOR_ 

HDWRE/IOP 

MANCOMB 


matic close commands 




BTU_MASK 


MANCOMC 








MANCOMD 








MAN UALjO VERRI DE_A 

Bit (32) 

Request to reenable and inhibit 

— 

ON/OFF 

COMPOOL 

DSC SOP 

OVERRIDEJJPDATE 

MANUAL_OVEHHIDE_B 


FDI on certain jets 






MANU ALJOVE RRIDE_C 






• 


MAN U AL_OVE RRI DE_D 










Table 3. ECS FD1 glossary (Cont) 


Computer Name 

Type/ 

Attribute 

Description 

Units 

Value 

Range 

Declared In 

Assigned In 

Referenced In 

MAPJLVOA 

Array (4)/ 

Bit assignments of packed manifold 

— 

ON/OFF 

MANIFOLDjCHECK 

Initialization 

MANIFOLDJCHECK 

MAPJLVOB 

Integer 

isolation valve talkback discretes 




(Mission Constant) 


MAPJtVOC 








MAPJCVOD 








MAP_MANCOMA 

Array ( 4 ) / 

Bit assignments of packed manifold 

— 

ON/OFF 

COMPOOL 

Initialisation 

MON ITO R__BTUJMAS K , 

MAP_MANCOMB 

Integer 

isolation valve automatic close 




(Mission Constant) 

RECHECKJONFAILS 

MAP_MANCOtlC 


commands 






MAP_MANCOMD 








MAPA 

Array (44)/ 

Bit assignments of jet commands 

— 

ON/OFF 

MANIFOLDjCHECK 

Initialization 

MANIFOLDJCHECK 

MAPB 

Bit (32) 

by manifold 




(Mission Constant] 


MAPC 








MAPD 








MAPWORD 

Array (44)/ 

Masks of driver talkbacks by jet 

— 

ON/OFF 

ONFAIL 

Ini tializat ion 

ONFAIL 


Bit (32) 





(Mission Constant) 


MASKJTHRESHOLD 

Bit(16) 

Internal mask for THRESHOLD 

— 

BIN (10) '1 

ONFAIL 

Initialization 

ONFAIL 



temperature of fuel/oxidizer 


| |fiIN(6) 'O' 


(Mission Constant) 


MINJ2UANTITY 

Array (3)/ 

Lesser of oxidizer /fuel quantity 

percent 

0~109 

COMPOOL 

FUEL__IM0ALANCE 

DSC SOP 


Integer 

in each RCS module 






MINORjCYCLE 

Bit (I) 

Flag indicating minor cycle 

— 

ON/OFF 

COMPOOL 

FCOS 

FDI^EXEC 

NEWFAILA 

Bit (32) 

First slot in ONFAIL pushdown 

— 

OH/OFF 

ONFAIL 

ONFAIL 

ONFAIL, RECHECK_ 

NEWFAILB 


list 





ONFAILS 

NEWFAILC 








NEWFAILD 











Table 3. RCS FDI glossary (Cont) 



U1 

\D 


Computer Name 

Type/ 

Attribute 

Description 

Units 

Value 

Range 

Declared In 

Assigned In 

Referenced In 

OFAI 

Bit { 32) 

First slot in OFFAIL pushdown 

— 

ON/OFF 

OFFAXL 

OFFAIL 

OFFAIL 

0FB1 


list 






0FC1 








OFDL 








OFA2 

Bit (32) 

Second slot in OFFAIL pushdown 

— 

ON/OFF 

OFFAIL 

OFFAIL 

OFFAIL 

OFB2 


list 





. 

OFC2 








OFD2 








OFA3 

Bit (32} 

Third slot in OFFAIL pushdown 

— 

ON/OFF 

OFFAIL 

OFFAIL 

OFFAIL 

0FB3 


list 






0FC3 








0FD3 








OFF_OVE RRI DE_A 

Bit (32) 

List of pets to be added to 

— 

ON/OFF 

0 VE RRI DE-UPDATE 

OVERRIDEJUPDATE 

STORE FDI IN IT 

OFF_OVE RRI DE_B 


fail list by crew request 





DATA 

OFF_OVE RRI DE_C 







OVERRI DE_UPDAT£ 

0FF__0 VE RRIDE__D 







MANI FOLD_CH EC K 

OLD_IVOA 

Bit (16) 

List of manifold isolation valve 

— 

ON/OFF 

MANIFOLD_CHECK 

KAMI FOLDjCHEC K 

MANXFOLD_CH2CK 

OLD_IVOD 


talkbacks from prior pass 






OLD_IVOC 








OLDjtVOD 








OLDFAILA 

BLt<32) 

Second slot in ONFAIL pushdown 

— 

ON/OFF 

ONFAIL 

ONFAIL 

ONFAIL 

OLDFAILB 


list 






OLDFAILC 








OLDFAILD 








OLEAK 

Array (44) / 

Output of ^et oxidizer injector 

°F 

TBD 

COMPOOL 

HDWRE/IOP 

ONFAIL 


Bit (16) 

temperature sensors 
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Computer Name * 

Type/ 

Attribute 

Description 

Units 

Value 

Range 

Declared In 

Assigned In 

Referenced In 

AUT_OVERRXDE_A 

Bit(32) 

Packed requests to reenable and 

— 

ON/OFF 

COMPOOL 

D&C SOP 

OVE RRI DE_UPDATE 

AUT JOVERRI DE_B 


continue FDI on certain jets 






AUT_OVERRIDE_C 








AUT_OVERRIDE__D 








BTU_PA01JD2 

Bit (1) 

Flags indicating MDM data path 

— 

ON/OFF 

COMPOOL 

FCOS 

MONITOR BTU MASK 

BTU_FA01_10 


failures 






BTU_FA03_02 








BTU_FA03_10 








BTU FF01 05 








BTU FF01 13 








BTU FF02 05 








BTU_FF02_13 








CALL_INIT 

Bit(l) 

Internal flag denoting MDM 
failure has occurred 

— 

OH/OFF 

M0NIT0R__BTU_MAS K 

MONI TO R_B T U_MAS K 

MONITOR_BTU_MASK 

CHANGE_OVERRIDE_STATUS 

Bit (1) 

Flag indicating a crew entry to 

— 

ON/OFF 

COMPOOL 

DSC SOP 

OVE RRI DE_UP DATE 



OVE RRI DE-UPDATE 






DRIVERA 

Bit (32) 

Packed jet driver talkbacks 

— 

ON/OFF 

COMPOOL 

HDWRE/IOP 

ONFAIL 

DRIVERB 








DRIVERC 








DRIVE RD 








FLEAK 

Array (44)/ 

Output of jet fuel injector 

°F 

TBD 

COMPOOL 

HDWRE/IOP 

ONFAIL 


Bit (16) 

temperature sensors 






FUEL_IMBALANCE_FLAG 

„ Array (3)/ 

Flags indicating fuel imbalances 

— 

OM/OFF 

COMPOOL 

PUEL_1 MBA LANCE 

DSC SOP 


Blt(l) 

in RCS tanks 






FUELJJUANTITY 

Array (3)/ 

Fuel remaining in RCS' tanks 

percent 

0-109 

COMPOOL 

RCS_PVT 

FUELJEMBAIAUCE 

• 

Integer 









i 

APPENDIX A 

FORMAT OF FDI INPOT-OUTPUT DISCRETES 


Certain of the* input discretes and output discretes are packed 
for FDI processing in groups of four 32-bit strings, designated by the 
letter A, B, C, or p terminating the name (e.g., JETCOMA, JETCOMB, 
JETCOMC, JETCOMD) . Those discretes which are so arranged include the 
following: 

(1) Manifold isolation valve close commands 

(2) Manifold isolation valve open talkbacks 

(3) Lists of bit assignments 

(4) Lists of manual override requests 

(5) Lists of inhibit requests 

(6) Jet commands 

(7) Jet driver talkbacks 

(8) Jet chamber pressure sensor talkbacks 

(9) Jet fail list 

(10) - Jet reenable requests 

(11) Previous fail flags 

(12) Recheck flags 

(13) Lists of jets failed prior to manifold isolation valve 
closure 

The reason for so packing these discretes involves consideration 
of storage access and CPU time burdens. 

One of the desirable properties of .any flight code dealing with 
discretes generated in hardware is that minimal repacking of these 
discretes be performed. To realize this, the code should operate on 
strings of bits channelized as they are in the MDM. 
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It was found that this data would be in eight strings of 16 bits 
(one AP101 half word). Thus, an operation on all the jet commands, for 
instance, would be performed as eight half-word instructions. Since 
many such operations are performed, and since the difference in timing 
between a half-word instruction and whole-word instruction was small 
or zero, these eight half words were concatenated into four whole 
words and then processed. The tradeoff is the time required to .per- 
form four concatenations , against performing each operation on twice 
as many bit strings. Currently, the design favors concatenation, 
hence the representation of each set of discretes in four whole words . 

These four whole words could be stored as an array, or stored in 
four independent locations as currently done.. There is no difference 
in storage requirements. However, there is a tradeoff between writing 
code for the strings as DO loops on array members , and replicated code 
on four independent addresses. Clearly, less code is required for the 
DO loop, but the current implementation of array addressing makes this 
time-inefficient for small arrays. Thus, while there is a greater core 
penalty for the four replications of each instruction, there is a sig- 
nificant saving in execution time. Studies into this tradeoff are 
currently underway, and should be reflected in subsequent. -releases 
of this document. 


The MDM channelization of these discretes may be found in either 
Reference 1 or Reference 2. In general, the assignments by jet for the 


four words obtained by concatenation are: 


BIT 

A 

B 

C 

D 

0 

112 

122 

211 

231 

1 

113 

123 

213 

233 

2 

115 

125 

215 

236 

3 

116 

126 

311 

331 

4 



314 

334 

5 



315 

336 


6 

7 

8 
9 

10 

11 

12 

13 

14 

15 


BIT 

A 

B 

C 

D 

16 

132 

144 

223 

243 

17’ 

134 

146 

225 

245 

18 

135 

157 

226 

246 

19 

146 

158 

324 

344 

20 



325 

345 

21 



326 

346 

22 



357 

357 

23 



358 

358 


2.4 

25 

26 

27 

28 

29 

30 

31 
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APPENDIX B 


FORMAT OF LEAK DETECTOR OUTPUTS 


Leak detection in the RCS jets is accomplished hy measuring the 
temperature at the fuel and oxidizer injector of each jet and comparing 
them with a threshold temperature. As leaking RCS fuel and oxidizer 
would very quickly cool the injectors, a leak is indicated by the sen- 
sor output being below the threshold temperature. This data comes 
through the MDM as 9 bits of fixed-point data, padded to a 16-bit integer 
in the GPC registers. 

While the HAL compiler has means of comparing the size of two 
numbers, it was believed quicker to mask the output with a threshold, 
and test the result as zero or nonzero. 

This implies the format of these sensor outputs must be- such that 
they can be treated as bit strings, and particularly can be operated 
upon by the logical AND. There is no conversion from integer format 
to bit string, so by assuming the data enters the GPL as integer, ther 
is a great saving in code. 
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